Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/PMASVrc8Aymys473wqEAxugSPEZHkRAv5rmLNC6ZoAS/2/34352e3136382e3132382e302f32322d3234203d3e20323638313039.roa
File:                     34352e3136382e3132382e302f32322d3234203d3e20323638313039.roa (raw, json)
Hash identifier:          P2nZL5qDX/gj7TeqDjKHHMvFfe/11vCWk8dSyynBOP8=
Subject key identifier:   AE:46:3F:81:49:D4:0C:36:DA:5F:5E:4D:6D:98:13:5C:E6:26:1A:43
Certificate issuer:       /CN=1B2849509549898D2FC85F41A2D1FE7B3C5F8D8F
Certificate serial:       7F4A71DE85B718B28120E1E13F1AF79C487C451C
Authority key identifier: 1B:28:49:50:95:49:89:8D:2F:C8:5F:41:A2:D1:FE:7B:3C:5F:8D:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B2849509549898D2FC85F41A2D1FE7B3C5F8D8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/PMASVrc8Aymys473wqEAxugSPEZHkRAv5rmLNC6ZoAS/2/34352e3136382e3132382e302f32322d3234203d3e20323638313039.roa
Signing time:             Thu 04 Apr 2024 03:01:20 +0000
ROA not before:           Thu 04 Apr 2024 02:56:20 +0000
ROA not after:            Thu 03 Apr 2025 03:01:20 +0000
asID:                     268109
IP address blocks:        45.168.128.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/PMASVrc8Aymys473wqEAxugSPEZHkRAv5rmLNC6ZoAS/2/1B2849509549898D2FC85F41A2D1FE7B3C5F8D8F.crl
                          rsync://rpki-repo.registro.br/repo/PMASVrc8Aymys473wqEAxugSPEZHkRAv5rmLNC6ZoAS/2/1B2849509549898D2FC85F41A2D1FE7B3C5F8D8F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B2849509549898D2FC85F41A2D1FE7B3C5F8D8F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 18:55:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:4a:71:de:85:b7:18:b2:81:20:e1:e1:3f:1a:f7:9c:48:7c:45:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B2849509549898D2FC85F41A2D1FE7B3C5F8D8F
        Validity
            Not Before: Apr  4 02:56:20 2024 GMT
            Not After : Apr  3 03:01:20 2025 GMT
        Subject: CN=AE463F8149D40C36DA5F5E4D6D98135CE6261A43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:80:01:ae:9c:c2:e0:6c:14:a5:be:80:97:83:
                    44:8f:ca:48:c5:dc:12:9d:22:49:5e:70:3b:d8:61:
                    87:2f:12:9b:2a:7e:eb:00:f1:28:c5:46:31:42:fb:
                    55:4f:2a:a5:c1:1e:4a:25:71:d0:f3:4b:7c:3e:0c:
                    61:b3:e3:47:a4:b0:f3:b4:43:4f:c9:d8:e0:82:c7:
                    f0:4d:be:7c:5c:29:a0:bd:48:59:fb:7f:f9:10:78:
                    cf:93:52:88:18:a0:4f:d8:ed:80:f9:e2:ed:28:d8:
                    39:b9:91:47:39:52:0f:01:e8:8c:0d:6e:17:9c:27:
                    d3:36:82:f5:a1:83:50:d9:e1:a5:9a:e3:ea:f9:28:
                    d5:5b:6d:70:f6:0e:65:c2:c2:6e:c6:39:cc:03:fe:
                    75:1d:81:3e:28:70:58:0d:21:7f:f5:71:f2:18:17:
                    e4:d5:ce:4b:c1:84:8f:3a:52:58:71:59:54:af:a8:
                    07:98:15:f4:2a:3f:a3:e3:ef:55:c9:f7:b5:53:cc:
                    e9:4c:d8:2c:49:27:9b:b0:9f:90:31:9e:ef:58:11:
                    77:12:cf:71:8d:9d:02:c6:36:59:7f:2b:c3:7f:ac:
                    be:93:41:2f:e8:8e:f8:cb:f0:ae:09:57:9f:61:66:
                    c0:c2:fe:c1:5f:87:0f:a4:9f:0d:d4:93:21:1f:bb:
                    53:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:46:3F:81:49:D4:0C:36:DA:5F:5E:4D:6D:98:13:5C:E6:26:1A:43
            X509v3 Authority Key Identifier:
                keyid:1B:28:49:50:95:49:89:8D:2F:C8:5F:41:A2:D1:FE:7B:3C:5F:8D:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/PMASVrc8Aymys473wqEAxugSPEZHkRAv5rmLNC6ZoAS/2/1B2849509549898D2FC85F41A2D1FE7B3C5F8D8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B2849509549898D2FC85F41A2D1FE7B3C5F8D8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/PMASVrc8Aymys473wqEAxugSPEZHkRAv5rmLNC6ZoAS/2/34352e3136382e3132382e302f32322d3234203d3e20323638313039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:ba:ff:6c:85:83:4b:64:9f:ed:a4:8f:09:01:70:d5:04:67:
         a1:05:7c:fb:67:81:b3:0d:82:b4:f9:5f:1f:4e:69:b2:e4:c1:
         37:37:6f:59:61:4a:82:ac:74:bd:3b:17:c7:47:be:da:f9:67:
         c7:69:2c:18:58:e2:32:8d:b9:26:f4:9a:e3:c4:0e:b0:53:9e:
         f7:51:3f:24:1f:6f:cc:df:ea:78:45:d2:74:d4:68:8c:e1:4a:
         5a:54:42:cb:04:1d:2b:bd:c5:02:71:eb:a2:8e:22:d2:97:bf:
         ee:b9:43:13:06:36:d4:59:87:90:86:3d:30:59:96:29:09:48:
         6d:91:a6:d3:cf:46:f6:69:f9:cf:41:10:6c:53:fe:6d:77:ad:
         83:e0:4b:fa:3c:ce:7f:c8:eb:dc:c5:a9:14:3d:f9:54:70:57:
         16:4c:43:15:fc:31:45:37:4b:76:94:10:5f:b6:68:02:11:4b:
         8e:09:ca:db:c8:ba:25:f6:79:89:58:c7:2f:28:4d:04:fb:da:
         f2:fb:a4:af:f6:dc:4b:41:fb:b7:b3:68:cc:31:3f:3e:0c:60:
         fc:b1:f5:f5:7d:7c:34:89:30:bd:4b:98:8d:d0:94:de:26:d4:
         7d:83:91:25:49:24:05:5e:95:cc:0d:92:57:3b:04:03:66:12:
         22:a8:1b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:42:10 2024 by rpki-client on console-fra.rpki-client.org